{"id":"CVE-2026-84278","published":"2026-10-08T19:20:51.387","lastModified":"2026-10-10T04:18:18.940","description":"IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.","cvssScore":7.2,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288035","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}